Hi Vipin, ok, does the tmp directory exist inside your ossec installation? this directory should belong to root:apache or whatever your group for the webserver user is called....
I had this problem a while ago too, and I think this was my issue along with some missing SELinux permissions... what does the webserver logs say? best, theresa Am Montag, 28. Dezember 2015 04:57:51 UTC+1 schrieb Vipin Hooda: > > Hi Theresa, > > > > Selinux is in disabled mode. > > > > > > Regards > > *Vipin Hooda* > > > > *From:* [email protected] <javascript:> [mailto: > [email protected] <javascript:>] *On Behalf Of *theresa mic-snare > *Sent:* 27 December 2015 22:13 > *To:* ossec-list > *Subject:* Re: [ossec-list] Nothing returned (or search expired) > > > > Hi Vipin, > > out of curiosity, do you have SELinux enabled? > Do you have it set to enforcing? > > best, > theresa > > Am Freitag, 25. Dezember 2015 13:13:10 UTC+1 schrieb Vipin Hooda: > > Hi Dan, > > Yes we have log level 7 alerts in OSSEC-WUI but I do not know from where I > can find PHP error details. So kindly guide. > > > Regards > Vipin Hooda > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of dan (ddp) > Sent: 24 December 2015 18:44 > To: [email protected] > Subject: Re: [ossec-list] Nothing returned (or search expired) > > On Thu, Dec 24, 2015 at 4:25 AM, <[email protected]> wrote: > > Hi, > > > > We have installed OSSEC-WUI but when we search log level 7 then we are > > greeting error "Total alerts found: 5 Nothing returned (or search > expired)". > > Can someone help to fix the issue. > > > > Are there any level 7 alerts in alerts.log? > Are there any PHP errors that might explain this? > > > Regards > > Vipin Hooda > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > > an email to [email protected]. > > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to a topic in the > Google Groups "ossec-list" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/ossec-list/RSn2zhXabEs/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to a topic in the > Google Groups "ossec-list" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/ossec-list/RSn2zhXabEs/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected] <javascript:>. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
